REVIEW 1 cited by
Intent-Aware Authorization for Zero Trust CI/CD
Not yet reviewed by Pith; the record is open.
This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.
SPECIMEN: schema-true, not a live event
T0 review · schema-true
One-sentence machine reading of the paper's core claim.
pith:XXXXXXXX · record.json · timestamp
read the original abstract
This paper introduces intent-aware authorization for Zero Trust CI/CD systems. Identity establishes who is making the request, but additional signals are required to decide whether access should be granted. We describe a control loop architecture where policy engines such as OPA and Cedar evaluate runtime context, justification, and human approvals before issuing access credentials. The system builds on SPIFFE-based workload identity and credential brokers, and enables fine-grained, auditable authorization. This is the third paper in a series on Zero Trust CI/CD design patterns.
Forward citations
Cited by 1 Pith paper
-
Say What You Mean: Natural Language Access Control with Large Language Models for Internet of Things
LACE is a hybrid LLM-RAG-OPA framework that generates and verifies natural-language IoT access-control policies and reports up to 88% decision accuracy in smart-home evaluations.
Discussion (0). Continue with ORCID to comment.